CVE-2019-19521

libc in OpenBSD 6.6 allows authentication bypass via the -schallenge username, as demonstrated by smtpd, ldapd, or radiusd. This is related to gen/auth_subr.c and gen/authenticate.c in libc (and login/login.c and xenocara/app/xenodm/greeter/verify.c).

Affected products

Openbsd

Openbsd

= 6.6

CVSS 3.1

9.8 CRITICAL

EPSS

2.7% (85th percentile)

Weakness

CWE-287

NVD status

Modified

Published

2019-12-04